golang-github-prometheus-promu vulnerabilities (SUSE)
83 vulnerabilities.
golang-github-prometheus-promuSUSEGrafana account takeover via OAuth vulnerability7.1 Highgolang-github-prometheus-promuSUSEStored XSS in Grafana's Unified Alerting7.3 Highgolang-github-prometheus-promuSUSEGrafana Enterprise datasource network restrictions bypass via HTTP redirects6.6 Mediumgolang-github-prometheus-promuSUSEPrototype Pollution in async7.8 Highgolang-github-prometheus-promuSUSEgolang.org/x/crypto/ssh Denial of service via crafted Signer7.5 Highgolang-github-prometheus-promuSUSEUncontrolled Resource Consumption in promhttp7.5 Highgolang-github-prometheus-promuSUSEExposure of Sensitive Information in Grafana4.3 Mediumgolang-github-prometheus-promuSUSECross Site Request Forgery in Grafana6.3 Mediumgolang-github-prometheus-promuSUSECross site scripting in Grafana proxy6.5 Mediumgolang-github-prometheus-promuSUSEOAuth Identity Token exposure in Grafana4.3 Mediumgolang-github-prometheus-promuSUSEExposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects8.0 Highgolang-github-prometheus-promuSUSEGrafana directory traversal for `.cvs` files4.3 Mediumgolang-github-prometheus-promuSUSEDirectory Traversal in Grafana4.3 Mediumgolang-github-prometheus-promuSUSEGrafana path traversal7.5 Highgolang-github-prometheus-promuSUSECross organization admin control in Grafana9.1 Criticalgolang-github-prometheus-promuSUSEPrototype Pollution in kriszyp/json-schema9.8 Criticalgolang-github-prometheus-promuSUSEXSS vulnerability allowing arbitrary JavaScript execution6.9 Mediumgolang-github-prometheus-promuSUSESnapshot authentication bypass in grafana9.8 Criticalgolang-github-prometheus-promuSUSEInefficient Regular Expression Complexity in chalk/ansi-regex7.5 Highgolang-github-prometheus-promuSUSESM2 Decryption Buffer Overflow9.8 Criticalgolang-github-prometheus-promuSUSEec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka...7.5 Highgolang-github-prometheus-promuSUSERegular Expression Denial of Service (ReDoS)7.5 Highgolang-github-prometheus-promuSUSEInsertion of Sensitive Information into Log File and Improper Output Neutralization for Logs in ansible5.5 Mediumgolang-github-prometheus-promuSUSEImproper Output Neutralization and Improper Encoding or Escaping of Output for Logs in ansible5.0 Mediumgolang-github-prometheus-promuSUSEImproper Verification of Cryptographic Signature in ansible7.1 Highgolang-github-prometheus-promuSUSEExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Mediumgolang-github-prometheus-promuSUSEInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Mediumgolang-github-prometheus-promuSUSEAnsible Improper Input Validation vulnerability7.8 Highgolang-github-prometheus-promuSUSEAnsible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems6.6 Mediumgolang-github-prometheus-promuSUSEAnsible fails to properly sanitize fact variables sent from the Ansible controller7.6 Highgolang-github-prometheus-promuSUSEAnsible Insertion of Sensitive Information into Log File vulnerability9.8 Criticalgolang-github-prometheus-promuSUSEImproper Input Validation in ansible2.2 Lowgolang-github-prometheus-promuSUSEAnsible apt_key module does not properly verify key fingerprint6.3 Medium